Hub/Switch Reference Guide

AAA Commands 213

Nortel WLAN—Security Switch 2300 Series Command Line Reference

The following command restricts a user at MAC address 06:05:04:03:02:01 to network access between 7 p.m.

on Mondays and Wednesdays and 7 a.m. on Tuesdays and Thursdays:

WSS# set mac-user 06:05:04:03:02:01 attr time-of-day mo1900-1159,tu0000-

0700,we1900-1159,th0000-0700

success: change accepted.

See Also

• clear mac-user attr on page 172

• show aaa on page 210

set mac-usergroup attr

Creates a user group in the local database on the WSS for users who are authenticated by a MAC address, and

assigns authorization attributes for the group.

(To configure a user group and assign authorization attributes through RADIUS, see the documentation for

your RADIUS server.)

Syntax

set mac-usergroup group-name attr attribute-name value

Defaults

None.

Access

Enabled.

Usage

To change the value of an attribute, enter set mac-usergroup attr with the new value. To

delete an attribute, use clear mac-usergroup attr.

You can assign attributes to individual MAC users and to MAC user groups. If attributes are configured for a

MAC user and also for the group the MAC user is in, the attributes assigned to the individual MAC user take

precedence for that user. For example, if the start-date attribute configured for a MAC user is sooner than the

start-date configured for the MAC user group the user is in, the MAC user’s network access can begin as soon

as the user start-date. The MAC user does not need to wait for the MAC user group’s start date.

Examples

The following command creates the MAC user group eastcoasters and assigns the

group members to VLAN orange:

WSS# set mac-usergroup eastcoasters attr vlan-name orange

success: change accepted.